$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: 7AAVLkE/wB/Dg2i2eHL6hf6dVAqGpCRADRAYKiiskeg= Subject key identifier: 77:1B:E9:67:78:DB:83:73:B9:DB:18:FE:E5:0C:61:5D:03:42:C7:AC Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 09F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 09DC Signing time: Fri 30 May 2025 20:07:08 +0000 Manifest this update: Fri 30 May 2025 20:07:08 +0000 Manifest next update: Fri 06 Jun 2025 20:07:08 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: iko5h8e3x8JmCRlX2R0QuSmXos6THYZ2X/e+d6mWeBM=) 2: 7E0A4CF07DD511EA906A3E7AC4F9AE02.roa (hash: unkzLsoSC8OhagJytTS2NwamPLpJq/uFvMRt2lZfV60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2544 (0x9f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: May 30 20:07:08 2025 GMT Not After : Jun 6 20:07:08 2025 GMT Subject: CN=683a0fec-1d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8b:91:35:8a:d3:26:d2:f6:88:54:ab:21:b2: 85:b8:18:13:21:51:67:85:c6:77:96:77:70:4f:98: f0:44:ee:27:7f:d7:31:d9:3d:96:da:26:9b:6b:d3: a4:c9:a9:33:f1:99:c6:2f:51:d7:e0:02:a2:38:75: 56:15:62:07:f1:42:b1:bf:d1:ec:7a:5d:58:11:6b: 1c:07:b0:31:75:e0:74:d8:01:d0:68:9e:e3:4d:2f: ed:87:a0:b7:20:a6:72:69:12:b0:a3:67:f3:88:ce: 94:b8:3c:ad:2a:52:7f:d5:ad:02:b5:2b:8b:3b:07: b7:ec:2e:dd:40:2b:a2:8a:d9:e0:4d:bc:80:9a:b6: d3:86:38:b1:00:ea:8e:4c:82:ed:59:e9:25:5a:82: 6c:e7:02:fa:de:a2:52:ca:95:ba:46:32:00:df:40: 29:b2:7a:37:05:78:0f:aa:71:65:6c:e2:11:35:8d: 26:df:c2:a1:28:4c:0e:6a:00:b8:61:a6:e6:dd:6e: 6d:ed:d4:89:74:79:da:8c:74:0d:be:c9:1e:5a:8b: 52:cb:3b:09:88:03:98:bd:b5:0a:2d:12:3d:19:dd: 52:cd:c7:ed:5a:66:d9:55:98:70:11:dd:28:20:2c: a4:b0:5f:8c:d4:19:82:08:bc:cf:30:13:a6:88:a1: d1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1B:E9:67:78:DB:83:73:B9:DB:18:FE:E5:0C:61:5D:03:42:C7:AC X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:14:af:1a:a3:f9:89:a0:53:06:e3:2c:58:08:59:49:1a:20: 0d:92:eb:8f:be:d8:d9:66:a6:40:15:fa:f7:5c:5d:b3:99:07: e3:11:0e:bd:22:c6:02:39:a3:22:10:65:8c:0f:e4:7d:0e:6f: fd:39:88:86:cc:3c:4e:78:1b:69:40:6f:9e:73:4a:01:b9:46: 78:08:e3:79:09:4c:bb:71:60:93:18:90:c3:cb:49:6f:db:da: a0:0e:de:59:70:7a:a5:23:69:0c:0e:24:6c:95:9b:70:e7:48: 4c:15:b0:65:ce:81:37:80:bc:f6:33:ca:28:ba:21:58:29:be: 42:91:ae:eb:ef:a2:ae:8d:a8:93:e2:0d:25:44:82:14:f6:98: 2e:f7:41:99:ed:f9:88:f0:f5:a6:eb:dc:c3:b4:f3:45:72:c4: 15:e8:6e:7a:e7:48:e1:4e:8e:d3:6d:2c:fb:84:02:4e:36:2d: 45:cd:8f:b7:b5:f2:07:90:2d:13:e7:8d:81:4e:b8:9c:e9:9e: 66:4f:c3:07:4f:e1:6d:b9:ed:3e:42:c1:39:03:8f:5b:3f:06: 46:2d:9b:6c:4e:b2:15:25:0d:d6:20:8d:91:21:18:12:40:37: 61:f9:60:ab:b5:f8:7c:42:6c:00:6d:c8:61:3d:d3:4d:e8:af: ad:16:de:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjUwNTMwMjAwNzA4WhcNMjUwNjA2MjAwNzA4WjAYMRYwFAYD VQQDEw02ODNhMGZlYy0xZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04uRNYrTJtL2iFSrIbKFuBgTIVFnhcZ3lndwT5jwRO4nf9cx2T2W2iaba9Ok yakz8ZnGL1HX4AKiOHVWFWIH8UKxv9Hsel1YEWscB7AxdeB02AHQaJ7jTS/th6C3 IKZyaRKwo2fziM6UuDytKlJ/1a0CtSuLOwe37C7dQCuiitngTbyAmrbThjixAOqO TILtWeklWoJs5wL63qJSypW6RjIA30Apsno3BXgPqnFlbOIRNY0m38KhKEwOagC4 Yabm3W5t7dSJdHnajHQNvskeWotSyzsJiAOYvbUKLRI9Gd1SzcftWmbZVZhwEd0o ICyksF+M1BmCCLzPMBOmiKHRoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcb6Wd4 24NzudsY/uUMYV0DQsesMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATFK8ao/mJoFMG4yxYCFlJGiANkuuPvtjZZqZAFfr3XF2zmQfjEQ69 IsYCOaMiEGWMD+R9Dm/9OYiGzDxOeBtpQG+ec0oBuUZ4CON5CUy7cWCTGJDDy0lv 29qgDt5ZcHqlI2kMDiRslZtw50hMFbBlzoE3gLz2M8oouiFYKb5Cka7r76KujaiT 4g0lRIIU9pgu90GZ7fmI8PWm69zDtPNFcsQV6G5650jhTo7TbSz7hAJONi1FzY+3 tfIHkC0T542BTric6Z5mT8MHT+Ftue0+QsE5A49bPwZGLZtsTrIVJQ3WII2RIRgS QDdh+WCrtfh8QmwAbchhPdNN6K+tFt5I -----END CERTIFICATE-----Generated at Sat May 31 17:16:19 2025 by rpki-client